low3.0
CVE-2023-37529
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript c…
Impact
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Platform | from 9.5 before 9.5.24 from 10.0.0 before 10.0.11 Version 11.0.0 |